
In the Claims 



1. (currently amended) A method of verifying with static checking whether a 
specified computer program satisfies a predefined set of conditions, comprising: 

converting the program into a logical equation representing the predefined set of 
conditions as applied to instructions and elements of the instructions of the program, the 
converting step including inserting flow control labels into the sub-equations of the 
logical equation, the flow control labels identifying conditional branch points in the 
specified computer program; 

applying a theorem prover to the logical equation to determine the truth of the 
logical equation, and when the truth of the logical equation cannot be proved, generating 
at least one counter-example identifying one of the conditions, one or more variable 
values inconsistent with the one condition, and any of the flow control labels for 
conditional branch points of the program associated with the identified variable values; 
and 

converting the at least one counter-example into an error message that includes a 
program trace that identifies a path through the computer program when the counter- 
example identifies one or more of the flow control labels. 

2. (original) The method of claim 1 wherein the converting step additionally 
comprises a step of converting the program into an intermediate language form prior to 
creating the logical equation. 

3. (original) The method of claim 2 wherein the flow control labels are inserted 
before converting the program into the intermediate language form, 

4. (original) The method of claim 2 wherein the flow control labels are inserted 
after converting the program into the intermediate language form. 

5. (original) The method of claim 2 wherein the intermediate language form is 
Dijkstra's guarded command language. 
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6. (original) The method of claim 1 wherein at least one of the flow control labels 
includes a flow control label name that includes a string that identifies a type of branch in 
the program and a line number in the specified computer program. 

7. (original) The method of claim 1 wherein at least one of the flow control labels 
includes a flow control label name that includes a value associated with an entry in a 
table that identifies a type of branch in the program and a line number in the specified 
computer program. 

8. (original) The method of claim 1 wherein at least one of the flow control labels 
is of the form L= =>P wherein Lisa flow control label name and P is a subcomponent of 
the logical equation, 

9. (original) The method of claim 8 wherein the flow control label name 
comprises a string that identifies a type of branch in the program and a line number in the 
specified computer program. 

10. (original) The method of claim 8 wherein the flow control label name 
includes a value associated with an entry in a table that identifies a type of branch in the 
program and a line number in the specified computer program. 

1 1 . (original) The method of claim 1 wherein at least one of the flow control 
labels is of the form L=k=22 P wherein L is a flow control label name, k is a constant 
value and P is a subcomponent of the logical equation, 

12. (original) The method of claim 1 1 wherein the flow control label name 
comprises a string that identifies a type of branch in the program and a line number in the 
specified computer program. 

13. (original) The method of claim 1 1 wherein the flow control label name 
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includes a value associated with an entry in a table that identifies a type of branch in the 
program and a line number in the specified computer program. 

14. (original) The method of claim 1 wherein at least one of the flow control 
labels is of the form {LBLPOS L P} wherein Lisa flow control label name and P is a 
subcomponent of the logical equation. 

15. (original) The method of claim 14 wherein the flow control label name 
comprises a string that identifies a type of branch in the program and a line number in the 
specified computer program. 

16. (original) The method of claim 14 wherein the flow control label name 
includes a value associated with an entry in a table that identifies a type of branch in the 
program and a line number in the specified computer program. 

17. (original) The method of claim 1 wherein at least one of the flow control 
labels is of the form {LBLNEG L P} wherein L is a flow control label name and P is a 
subcomponent of the logical equation. 

18. (original) The method of claim 17 wherein the flow control label name 
comprises a string that identifies a type of branch in the program and a line number in the 
specified computer program. 

19. (original) The method of claim 17 wherein the flow control label name 
includes a value associated with an entry in a table that identifies a type of branch in the 
program and a line number in the specified computer program. 

20. (original) The method of claim 1 wherein at least one of the flow control 
labels is of the form {LBLPOS L True}==>P wherein L is a flow control label name and 
P is a subcomponent of the logical equation. 
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21. (original) The method of claim 20 wherein the flow control label name 
comprises a string that identifies a type of branch in the program and a line number in the 
specified computer program. ^ 

22. (original) The method of claim 1 wherein the flow control label name 
identifies a line number in the specified computer program at which an associated 
program instruction is located and includes a sequence number indicating an order of 
execution of the program instruction at the identified line number relative to other 
program instructions identified by other flow control labels. 

23. (currently amended) A computer program product for use in static checking 
in conjunction with a computer system, the computer program product comprising a 
computer readable storage medium and a computer program mechanism embedded 
therein, the computer program mechanism comprising: 

a verification condition generator that converts a specified program into a logical 
equation representing the predefined set of conditions as applied to instructions and 
elements of the instructions of the program, the verification condition generator including 
instructions that insert flow control labels into the sub-equations of the logical equafion, 
the flow control labels idendfying conditional branch points in the specified computer 
program; 

a theorem prover that processes the logical equation to determine the truth of the 
logical equation, and when the truth of the logical equation cannot be proved, generates at 
least one counter-example identifying one of the conditions, one or more variable values 
inconsistent with the one condition, and any of the flow control labels for conditional 
branch points of the program associated with the identified variable values; and 

a post processing module that converts the at least one counter-example into an 
error message that includes a program trace that identifies a path through the computer 
program when the counter-example idendfies one or more of the flow control labels. 

24. (original) The computer program product of claim 23 wherein the verificadon 
condition generator includes instructions for converting the program into an intermediate 
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language form prior to creating the logical equation. 

25. (original) The computer program product of claim 24 wherein the verification 
condition generator includes instructions for inserting the flow control labels before 
converting the program into the intermediate language form. 

26. (original) The computer program product of claim 24 wherein the verification 
condition generator includes instructions for inserting the flow control labels after 
converting the program into the intermediate language form. 

27. (original) The computer program product of claim 24 wherein the 
intermediate language form is Dijkstra's guarded command language. 

28. (original) The computer program product of claim 23 wherein at least one of 
the flow control labels includes a flow control label name that includes a string that 
identifies a type of branch in the program and a line number in the specified computer 
program. 

29. (original) The computer program product of claim 23 wherein at least one of 
the flow control labels includes a flow control label name that includes a value associated 
with an entry in a table that identifies a type of branch in the program and a line number 
in the specified computer program. 

30. (original) The computer program product of claim 23 wherein at least one of 
the flow control labels is of the form L= =>P wherein L is a flow control label name and 
P is a subcomponent of the logical equation. 

3 1 . (original) The computer program product of claim 30 wherein the flow 
control label name comprises a string that identifies a type of branch in the program and a 
line number in the specified computer program. 
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32. (original) The computer program product of claim 30 wherein the flow 
control label name includes a value associated with an entry in a table that identifies a 
type of branch in the program and a line number in the specified computer program. 

33. (original) The computer program product of claim 23 wherein at least one of 
the flow control labels is of the form L=k= =>P wherein Lisa flow control label name, k 
is a constant value and P is a subcomponent of the logical equation. 

34. (currently amended) The computer program product of claim 23 wherein 
names of the flow control labels nam e comprises a string that identifies a type of branch 
in the program and a line number in the specified computer program. 

35. (currently amended) The computer program product of claim 23 wherein 
names of the flow control labels nam e includes a value associated with an entry in a table 
that identifies a type of branch in the program and a line number in the specified 
computer program. 

36. (original) The computer program product of claim 23 wherein at least one of 
the flow control labels is of the form {LBLPOS L P} wherein L is a flow control label 
name and P is a subcomponent of the logical equation. 

37. (original) The computer program product of claim 36 wherein the flow 
control label name comprises a string that identifies a type of branch in the program and a 
line number in the specified computer program. 

38. (original) The computer program product of claim 36 wherein the flow 
control label name includes a value associated with an entry in a table that identifies a 
type of branch in the program and a line number in the specified computer program. 

39. (original) The computer program product of claim 23 wherein at least one of 
the flow control labels is of the form {LBLNEG L P} wherein L is a flow control label 
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name and Pisa subcomponent of the logical equation. 

40. (original) The computer program product of claim 39 wherein the flow 
control label name comprises a string that identifies a type of branch in the program and a 
line number in the specified computer program, 

41. (original) The computer program product of claim 39 wherein the flow 
control label name includes a value associated with an entry in a table that identifies a 
type of branch in the program and a line number in the specified computer program. 

42. (original) The computer program product of claim 23 wherein at least one of 
the flow control labels is of the form {LBLPOS L True}= =^>P wherein L is a flow 
control label name and P is a subcomponent of the logical equation. 

43. (original) The computer program product of claim 42 wherein the flow 
control label name comprises a string that identifies a type of branch in the program and a 
line number in the specified computer program. 

44. (original) The computer program product of claim 42 wherein the flow 
control label name includes a value associated with an entry in a table that identifies a 
type of branch in the specified computer program and a line number in the specified 
computer program. 

45. (original) The computer program product of claim 23 wherein the flow 
control label name identifies a line number in the specified computer program at which 
an associated program instruction is located and includes a sequence number indicating 
an order of execution of the program instruction at the identified line number relative to 
other program instructions identified by other flow control labels. 

46. (original) The method of claim 20 wherein the flow control label name 
includes a value associated with an entry in a table that identifies a type of branch in the 
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specified computer program and a line number in the specified computer program. 

47. (new) A method, comprising: 

converting a computer program into a logical equation representing a predefined 
set of conditions; 

inserting flow control labels into sub-equations of the logical equation, the flow 
control labels identifying branch points in the computer program, wherein at least one of 
the flow control labels is of a form selected from the group consisting of (1) L= =>P 
wherein Lisa flow control label name and P is a subcomponent of the logical equation, 
(2) L=k=22 P wherein L is a flow control label name, k is a constant value and P is a 
subcomponent of the logical equation, (3) {LBLPOS L P} wherein L is a flow control 
label name and Pisa subcomponent of the logical equation, (4) {LBLNEG L P} wherein 
L is a flow control label name and Pisa subcomponent of the logical equation, and (5) 
{LBLPOS L True}=>P wherein L is a flow control label name and P is a subcomponent 
of the logical equation; 

applying a theorem prover to the logical equation to determine a truth of the 
logical equation, and when the truth of the logical equation cannot be proved, generating 
at least one counter-example identifying one of the conditions; and 

converting the at least one counter-example into an error message that comprises 
a program trace that identifies a path through the computer program when the counter- 
example identifies one or more of the flow control labels. 



